You don't even have to re-use a k value - if the attacker can guess your k value...

caf on Feb 17, 2015 | parent | context | favorite | on: “RNG broken for last 4 months”

You don't even have to re-use a k value - if the attacker can guess your k value, one signature is enough to recover your private key.